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We present a two-player communication task that can be solved by a protocol of poly- 
logarithmic cost in the simultaneous message passing model with classical communication 
and shared entanglement, but requires exponentially more communication in the classical 
interactive model. 

Our second result is a two-player nonlocality game with input length n and output 
^ i of polylogarithmic length, that can be won with probability 1 — o (1) by players sharing 

' polylogarithmic amount of entanglement. On the other hand, the game is lost with 

^ , probability Q (1) by players without entanglement, even if they are allowed to exchange 

/ up to k bits in interactive communication for certain k Cz Cl (n^/''). 

These two results give almost the strongest possible (and the strongest known) indi- 
cation of nonlocal properties of two-party entanglement. 

> 

^ ; 1 Quantum vs. classical communication and games 

O ' 

The ultimate goal of quantum computing is to understand what advantages are offered by 
■ using the laws of quantum mechanics to build computational devices. We want to find tasks 

Q\ . where quantum computers are considerably more efficient than classical ones. 

In this paper we study quantum computation from the perspective of Communication 
Complexity, first defined by Yao |Y79| . Two parties, Alice and Bob, try to solve a com- 
^ . putational problem that depends on x and y. Initially Alice knows only x and Bob knows 

^ I only y; in order to solve the problem they communicate, obeying to restrictions of a specific 

communication model. 

A communication protocol describes behavior of the participants in response to each 
possible input. The cost of a protocol is the maximum total amount of (qu)bits communicated 
by the parties, according to the protocol. 

We say that a communication task P is solvable with bounded error in a given communi- 
cation model by a protocol of cost O (k) if for any constant e > 0, there exists a corresponding 
protocol solving P with success probability at least 1 — e and communicating O (k) (qu)bits. 
If the protocols, in addition, either refuse to answer or succeed, then we say that the solution 
is 0- error. 

In order to compare the power of two communication models, one has to either prove 
existence of a task that can be solved more efficiently in one model than in the other, or to 
argue that no such task exists. 

We will, in the first place, be concerned about the following models. 
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• Interactive (two-way) communication is a model where the players can interactively 
exchange messages till Bob decides to give an answer, based on the communication 
transcript and his part of input. 

• One-way communication is a model where Alice sends a single message to Bob who has 
to give an answer, based on the content of the message and his part of input. 

• Simultaneous Message Passing (SMP) is a model involving third participant, a referee. 
Here both Alice and Bob send one message each to the referee, who has to give an 
answer, based on the content of the received messages. 

All three models can be either classical or quantum, according to the nature of commu- 
nication allowed between the players. The classical versions of the models are denoted by TZ, 
TZ^ , and the quantum versions are denoted by Q, , Q", respectively. 

It is clear that interactive communication is at least as powerful as one-way communi- 
cation, and it is well-known that the former can, in fact, be much more efficient than the 
latter, both in quantum and in classical versions. All the same is true regarding one-way 
communication vs. SMP. 

The model of SMP (both QH and 7^ll) can be made stronger by allowing some shared 
resource between Alice and Bob, which can be either shared randomness or shared entangle- 
ment. The former case can be viewed as allowing Alice and Bob to follow mixed joint strategy, 
and the latter case means that they can perform quantumly-nonlocal (i.e., entangled) oper- 
ation, as described by the laws of quantum mechanics. Of course, shared entanglement is 
always at least as helpful as shared randomness, and it has been shown ( |GKRW06j ) that 
the latter can, in fact, be much more efficient than the former (both with QH and with T^-"). 
When enhanced by shared randomness, the models are denoted as QH'*'"'' and 7^ll'^"'^ and 
the case of shared entanglement is addressed by QH'*^"* and T?."''^"'*. 

In this paper our primary concern is with separating communication models. Both for 
previously known results (mentioned later) and for our contribution it is the case that the 
first demonstrated super-polynomial separation had, in fact, been exponential. 

Communication tasks can be either functional, meaning that there is exactly one correct 
answer corresponding to every possible input, or relational, when multiple correct answers are 
allowed. Functional tasks over domains forming product sets w.r.t. each player's inputs are 
called total. The three types of communication tasks form a hierarchy, if viewed as tools to 
separate communication model. In particular, there are known pairs of communication mod- 
els that can be separated through a relational problem but are equally strong over functions, 
either total or partial, and there are pairs of communication models that can be separated 
through a partial functional problem but are conjectured to be equally strong over total 
functions. 

For 0-error one-way and interactive protocols, separations have been demonstrated by 
Buhrman, Cleve and Wigderson |BCW98] . In the bounded-error setting the first separation 
has been given by Raz [R99J , showing a problem solvable in Q exponentially more efficiently 
than in TZ. Later, Buhrman, Cleve, Watrous and de Wolf [BCWWOl] demonstrated an expo- 
nential separation for the SMP model. All these separations have been given for functional 
problems. 

For one-way protocols with bounded error, the first separation has been shown by Bar- 
Yossef, Jayram and Kerenidis |BJK04| for a relational problem. Later, Gavinsky, Kempe, 
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Kerenidis, Raz and de Wolf |GKKRW07] gave a similar separation for a partial functional 
problem. 

These results show that quantum communication models can be very efficient, when 
compared to their classical counterparts. Recently it has been shown in |G08j that there exists 
a problem that can be solved by a quantum one-way protocol more efficiently than by any 
classical two-way protocol. That result simultaneously subsumes the separation in |BJK04] 
and partially that in [R99] (in [G08] we were only able to show separation through a relational 
problem) . 

Closely related to SMP models T^H'*'"^ and TZ^^'^^^ is the notion of nonlocality games. In 
this setting two players, Alice and Bob, receive two parts of input and must produce their 
output without communicating to each other. The difference from the SMP setting is that 
there is no referee (who would help the players to achieve their goal), instead there is a 
verifier who checks whether the answers from the players are good w.r.t. the given input. 
Every nonlocality game defines which input pairs are allowed and which pairs of answers are 
good for each input pair. 

There is a number of known nonlocality games (cf. |CHTW04] ) that can be played with 
higher success probability by entangled (nonlocal) players than by unentangled (local) play- 
ers who share randomness, hence the name. Historically ( |EPR35] . |B64j ). the setting of 
nonlocality games has been viewed as a way to demonstrate nonlocal behavior of quantum 
entanglement. As a tool for such purpose, it is more powerful (i.e., it allows more flexibil- 
ity and thus is less "convincing") than separating TZ^^'P^^ from T?."''^"* through any type of 
communication task. 

1.1 Our results 

In this work we give even more surprising demonstration of "usefulness" of quantum mechan- 
ics in solving communication problems. We give a communication problem that is 

• easy in the weakest known communication model with entanglement, 7^11 

• hard in (one of) the strongest classical 2-party models, TZ. 

Moreover, our communication problem is also easy in , and therefore this result sub- 
sumes [G08] . 

Theorem 1.1. For infinitely many n £N, there exists an (explicit) relation with input length 
n that can he efficiently solved in T^H'*^"*, namely there is an SMP protocol with error o(l) 
where the two players share O (log^ n log log n) EPR pairs and send classical messages of 

length O (log^ n log log n) . The same relation has communication complexity U.i ^ { ) in 




the interactive classical model (TZ). 

The relation we use is a modification of a construction independently suggested by R. 
Cleve ([C]) and S. Massar ([B]), as a possible candidate for such separation. In |G08| a 
more "demanding" version of this relation was used. In particular, the communication task 
from |G08j is unlikely to admit an efficient solution in T^H'*^"*. 

Our second result is a new, stronger type of a nonlocality game. Besides admitting 
winning probability I — o(l) by two players who share entanglement, but not by any local 
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mixed strategy, the game remains hard even if we allow considerable amount of classical 
communication between the classical players. 



Theorem 1.2. For infinitely many n E N, there exists an (explicit) 2-party nonlocality game 
where both players receive input of length n and are required to produce output of length 
O (log^ n log log n) . The game can be won with probability 1 — o(l) by players who share 
O (log^ n log log n) bits of entanglement (EPR pairs), but any local mixed strategy would result 
in loss with probability Cl (1); moreover, the loss would remain Q, (1) even if the players are 

allowed to interactively exchange o ( i ) classical bits before producing their output. 



^ log n y 

The statement is straightforward modulo Theorem [HE 

Proof. Let P be the communication problem used in Theorem II .1^ and let S be an T^H'*^"*- 
protocol for P, as promised. W.l.g., we assume that the referee's action in S is deterministic 
(at most O (log n) bits of randomness are required, which can be chosen by Alice and attached 
to her message). 

Let a game G be as follows: 

• input to G is the same as input to P; 

• for any (x, y), the set of valid responses in G coincides with the set of pairs of messages 
that would result, according to S, in a correct answer by the referee to (x,y). 

Defined this way, G can be won with probability 1 — o(l) by two entangled players obeying 
S. On the other hand, G is lost with probability (1) by any classical players exchanging 

o ^ ^ ^ bits, as otherwise they would be able to solve P (in collaboration with a referee 

obeying 5), in doing so contradicting the statement of Theorem ll.il ■ 

To the best of author's knowledge, this is the first example of a nonlocality game where an 
entangled strategy outperforms any classical one, even if the latter is "boosted" by allowing 
up to k bits of interaction, where k is exponential in the total length of players' answerso 
The fact that our game is a simple 2-party one makes it an appealing candidate for an actual 
physical experiment. 



2 Previous and new techniques 

The main result of this paper can be viewed as strengthening of |G08j . The communication 
task analyzed in this paper is arguably more basic than that from |G08j . and its analysis 
requires more refined tools. On the high level, the difference can be viewed as follows. 
Ignoring some technical details]! in the both cases the task is: 

^Note that no statement in the flavor of Theorem 11.2! can be derived from [G08) . as the communication 
task considered there is not known to have an efficient solution in T?."'*^"*. 

^Examples of Q, (n)-party nonlocahty games efficiently played with entanglement, where classical solution 
would require n^'^' bits of auxiliary communication were given by Buhrman, H0yer, Massar and Rohrig 
in [BHMROS^ and |BHMR06] - of course, the total output length is also SI (n) in that case. 

■^In the actual construction we allow certain deviations from this description, as required for our proof 
technique to go through. 
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• there is an n x n table, where each cell contains 2 elements; 

• every element from |l, . . . , 2n^} appears in the table once; 

• Alice knows the row and Bob knows the column of each element; 

• for the answer the players must choose a cell and give certain witness of knowledge 
about the both element in it. 

The intuitive motivation to ask for a witness is that ability to provide it would implicitly 
require from classical players to know the element of the chosen cell, while entangled players 
are able to get a witness using much less communication than it would be required in order 
to learn the content of a cell. 

The two versions of the communication task differ in how may the players choose a cell 
for their answer. In this paper we consider a version where the players can pick any cell. 
In |G08j the players had to pick a cell from the first row. 

This (apparently minor) difference surprisingly makes the earlier version considerably 
harder to solve; in particular, it is unlikely to admit an efficient solution in the model of 
simultaneous messages with entanglement (but still has an efficient solution in the model of 
quantum one-way communication, as demonstrated in |G08j ). The same difference makes 
the earlier version less "resistant" to lower bound techniques. 

The lower bound proof, in the both cases, consists of several "quasi-reductions" , the first 
of which can be (again, ignoring some technicalities) stated as 

Proposition. If there is a two-way classical solution of cost k to the communication task 
under consideration, then the 1 x 1-version of the task can be solved with probability (1/n) 
by a protocol of similar cost. 

In this statement by a 1 x 1-version we mean a modification of the task where the players 
are more restricted - namely, they no longer have freedom to choose a cell, but must give 
their answer w.r.t. the first cell of the first row. 

We can see that the proposition is almost trivial if the communication task under con- 
sideration is the earlier version: The first row has n elements, so with probability 1 /n "a cell 
from the first row" will turn out to be the first one (of course, an adversarial scenario would 
be that a protocol for the original problem never outputs an answer based on the first cell, 
but that can be helped by randomly permuting the columns in the beginning). 

When we give the players more freedom and let them choose any cell from the table, 
we make the problem affordable for the model of simultaneous messages with entanglement, 
but the aforementioned proof idea is no longer valid: there are cells and a similar reduc- 
tion would only guarantee a solution for the 1 x 1-version with probability 1/n^ (which is 
easy to achieve with O (log n) classical communication, and therefore cannot be used as an 
intermediate step towards a lower bound in that model). 

The main technical contribution of this paper is a way to prove an analogue of the above 
proposition for the more relaxed version of the communication problem. The new proof is 
based on a technical lemma due to Harsha, Jain, McAllester, and Radhakrishnan [HJ AR07] . 
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3 Preliminaries 



In our analysis we use the following generalization of the standard bounded error setting. 
We say that a protocol solves a problem with probability 6 with error bounded by e if with 
probability at least 6 the protocol produces an answer, and whenever produced, the answer 
is correct with probability at least 1 — e. 

Denote by the additive identity of a (finite) field. 

Let X = {xi, .., Xfc) and y = {yi, .., yi) be tuples of sets. We will call XiCiyj a cell, denoting 
it by cell{i,j). 

Let n be a power of 2, and let us for the rest of the paper implicitly assume equivalence 
between any a G [n] and the lexicographically a'th element of ^.7^2°^". Define the following 
communication problem. 

Definition 1. Let x = (xi, ..,Xn) and y = {yi, ■■,yn) be sequences of subsets of [4?i^], where 
each subset is of size n. Let z = ((n, ji,ci), .., («t„, for tn =^ [loglognj. Then 

{x,y,z) G P if it holds that 

• For any h ^ k2, (ikiJki) + {ik2,jk2); 

• for every k G [tn], either \cell{ik, jk)\ 2, or Cfc G [4n^] \ {0} and {ck, a + b) =0, where 

• at least one of the following holds: 

t n? 
\{k G [tn]\ |cell(ifc, = 2}| > ^ or \{{i,j) G [n] x [n]| |cen(i,i)| = 2}| < — . 

Unless stated otherwise, we will assume that input to P satisfies the following additional 
promises (which, in particular, make the problem non-trivial): 

2 

• at least ^ cells are of size 2; 

• maxag[4„2] {\{i\a G or a G yi]\] < 4Vlogn; 

• E.,,6[n]|ceU(i,j)l <2n2. 

We denote by Un the uniform distribution of such input. 

Define to be the uniform distribution over all possible pairs of n-tuples of n-element 
subsets of [4n^] (observe that the distribution is product not only with respect to the two 
sides of input, but in fact every Xi or y^ is chosen independently from the rest of the input - 
this property will play a crucial role in our lower bound argument). 

The following estimation is straightforward. 

Observation 3.1. produces an instance outside the support ofUn with probability o(l). 

In particular, U'n produces trivial instances of P with probability that can be ignored, as 
long as we are concerned about solving the task with constant-bounded error. 

We will give an efficient '/^."''^"'-protocol that correctly solves P with probability 1 — o (1), 
for any input from the support of Un- Then we will show that any short deterministic 
7^-protocol fails with probability ^2 (1), when the input is drawn from 14'^. Thanks to Obser- 
vation 13.11 and the Minimax theorem, that will imply Theorem II. li 
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4 Efficient protocol for P in 



,ent 



Let us construct an SMP protocol that uses entanglement and delivers O (log^ n log log n) 
classical bits to the referee in order to solve P with probability 1 — o (1), as long as the input 
comes from the support of Un- 

For any tuple of sets x = (xi, .., x^), such that Uxj C [m] for some m being a power of 2, 
we define a measurement Tlx acting on logm qubits, as follows. 

Let ax maxjgj^j {K^H ^ "^ill}' Intuitively, in defining n^; we would like to measure 

logm qubits with the /c + 1 projectors E^"^ =^ Sjexi ^"^^ ^o"^ =^ ^j^uxi (indeed, 
that will be the action of n^, when Ox = 1). However, if > 1 then the above collection of 
projectors does not constitute a valid measurement, as Yl ^i^^ ^ I- To handle that, define: 

Ilx = {e'^^\....E^A- Ef'^''^ —E^Uorl<i<k- E'^^^''^I-Y,Et\ 

\ / CXx 

Defined this way, n^, is a valid quantum measurement 
Consider the following protocol S. 

1. Alice and Bob share, in the natural way, an entangled state ^X^tg[4„2] \t) \t). 

2. Alice measures her part of the shared state with and Bob measures his with Hy. 

3. Alice and Bob both apply the Hadamard transform to both of the log n qubit halves of 
the shared state. 

4. Alice and Bob both measure their parts of the state in the computational basis. 

5. Alice and Bob send the outcomes of both measurements to the referee (i.e., 4 outcomes 
are sent). 

6. Upon receipt of {i, k) from Alice and (j, I) from Bob, the referee outputs (i, j, k 

Obviously, S does not solve P, though we will see how it can be used as a "stepping stone" 
for the desired protocol. 

Let us analyze the action of 5 upon an input from the support of lin- Assume that 
i = / and j = ^ 0. This means that in step [2] of 5", Alice's measurement has resulted 

(x) (y) 

in E} and Bob's in E) . Then the shared state turns into 

«o Jo 

^ ^ V It) \t) 

V|cen(zo,Jo)U^,,ii(,^^^.^) 

(note that unless cell(io,Jo) contains less than 2 elements, its content is not locally accessible 
by the players, neither at this stage nor later in the protocol). 

Assume that cell(io,Jo) contains exactly 2 elements, a and b. Then after step [3] of the 
protocol the shared state becomes (ignoring normalization) 



E 

k,l 



* Although Tlx is not, in general, a projection, it is a measurement of a very special kind - a POVM with 
commuting elements. 
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and \k) \l) has non-zero amplitude if and only if {k + l,a) = {k + l,b), which is equivalent 
to {k + l,a + b) =0. Moreover, each pair k^, Iq satisfying this condition is equally likely to 

become the measurement outcome in step [H in particular, the value of =^ kQ + /q is drawn 
from uniform distribution whose support is |i| (t, a + 6) = 0|. 

To sum up, if S produces a triple {io, jQ-,to), such that iq ^ 0, j'o / and cell(io,io) = 
{o, 6} for some a then 

• to 7^ with probability 1 — o(l), and 

• (t, a + fe) = with certainty. 

It remains to analyze the probability that |cell(i,j)| = 2. The joint measurement taken 
by the parties in step [2] can be written as 

where cg*' S |tiX«i|) » (E,,,,, I«2>(i2l) and E?'»> S (/ - E 

corresponds to the case when S returns i = or j = 0). 

Let =^ ^47^- Then for any io / and jo / 0, 

or- ■ ■ -1 ^ I 1 / I / I ^ I \i \1 |cen(io,jo)| 



In particular. 



r, . ^, I n |cell(i',/)| = 2)1 1 



and 



Pr [i / 0, J / 0] > Pr / 0,i / 0, |cell(z,j)| = 2] 



|{(i',/)||cen(i',y)| =2}| 



V 



1 1 
> > 



(2) 



260axay ~ 4160 log n' 



where all the inequalities follow from the fact that input belongs to the support ollAn- 

We are ready to construct a protocol for solving P. Simply, repeat in parallel S sufficiently 
many times in order to guarantee that, with probability 1 — o (1), at least tn instances produce 
triples (i', j', t') referring to pairwise different cells, consisting exclusively of non-zero elements 
(i.e., i' ,j' 7^ and 7^ 0). If that happens - our protocol outputs t„ such triples (randomly 
chosen from the obtained ones). From ([2]), ([T]), and an observation that all valid non-zero 
triples are equally likely to show up, it is clear that O (log n log log n) parallel copies of S are 
sufficient. Such protocol solves P with probability 1— o (1), and its communication complexity 
is O (log^ n log log n) . 
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5 Solving P is expensive in IZ 



We will show that solving P va. TZ requires a protocol of cost Q i^ ^^i ^ ■ Unless stated 
otherwise, all the following statements are made w.r.t. the model TZ. 

In our analysis we will consider the following communication problem. 



Definition 2. Let x,y C [4n^], such that \x\ 



\y\ 



n and \xriy\ = 2. Let a be a 



permutation over [4n ] and c € [4n ] \ {0}. Let x Dy = {a, b}, then Pixi admits two types 
of answers, as follows: 



{x, y,c) e Pixi if (c, a + b) = 0; 

(x, y, (fj, c)) £ Pixi if (c, a{a) + a{b)) 
,(ixi) 



0. 



Let Un^"^' be the uniform distribution of valid inputs to Pixi- 
Let 5 be a protocol for P of cost k that can be wrong with probability at most £ (a 
sufficiently small constant). Then there exists a deterministic protocol S' which is wrong 
with probability at most 2e w.r.t. U^^, as follows from Observation 13.11 and the Minimax 
theorem. Unless stated otherwise, we will assume that the input is distributed according 
to U^. 

Let infl(x, y, i,j, c) be the predicate indicating that, w.r.t. the instance (x, y) of P, it is the 
case that |cell(i,j)| = 2 and {i,j,c) is a part of the output by S'. Define infl(x, y, j) to be 
the predicate indicating whether there exists c that would satisfy infl(x, y, c). Intuitively, 
infl(x, y, i, j) means that information about cell(i,j) constitutes an influential part of the 
output by S", when the input is {x,y). For every satisfying assignment to infl(x, y, i, j) 
denote by c^'J the (unique) value that satisfies infl(a;, y, i,j, c^'j) - here we assume w.l.g. that 
the tn cells being addressed in the output of S' are always pairwise different, as required by 
the definition of P. 

Denote: 



Pi,j =^ 

x,y 

dcf „ 

qi,j = Pr 

x,y L 



"id > 



GPixi 



def 



infl(x,y,z,i) and {xi,yj,c^ 
infl{x, y,i,j) and {xi,yj,c>]) 
Pi,j + lij = Pr [infl(x, y, . 
Note that the correctness assumptions for 5' imply that (assuming e < 1/3) 

< 2£-t„,. 



(1 — 2e)t„, tn sr-^ 

Pi i > > and > u, , 



(3) 



Denote A 



def 



Pr 



{xi,yj,Cif) G Pixi infl(a;,y,i,j) 



elements of A often are influential. 
Claim 5.1. E(i,j)GA^i,i > ^• 



> 1 — 800e|. Let us see that 
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Proof. From ([3]), 



- Z^^»J zinn 4nn - Z^-^*'-' 400 SOOe ' 



400 400 

and ^ < ^ {p,j - 1^). For i, j G [n], let 



/ def 



Pr 
Pr 



(.Xi,yj,clf) G ^ixi infl(a;,y,f, j) 
{xi,yj,d^f) 0Pixi mfl(x,y,z,i) 



2 J 



Observe that ^ + q'^ ^ = 1 and ^ = j) q'^ j < 800e|. Therefore 



l<i j<n 



800e) - E E 



(i,i)eA 



as wanted. I 
We will need the following two lemmas, based on |HJAR07] and |G08j . correspondingly. 



Lemma 5.2. ( |HJAR07] . Lemma 5.3, reformulated) Let 61,62 > 0, ki,k2 £ N, such that a 
communication problem P is solvable w.r.t. distribution D by a ki-round private coin protocol 
which produces an answer with probability at least 61, and a produced answer is correct with 
probability at least 62- Assume also that the mutual information between the transcript of the 
protocol and its inputs is at most k2 bits, with probability 1 — o(5i). 

Then P is solvable w.r.t. D by a public coin protocol of communication cost O {ki + k2) 
which produces an answer with probability at least 61 /2 and any produced answer is correct 
with probability at least 62 — (1). 



The statement in [HJAROT] is made in different terms, for completeness we give a sketched 
proof of Lemma 15.21 in the Appendix. 



Lemma 5.3. ( |G08j ) For some absolute constant 6, any public coin TZ-protocol of commu- 
nication cost k solving Pixi with error bounded by 6 returns an answer with probability 

Q f log^ n+k^ log^ n 

In the definition of Pi x 1 's analogue in |G08j (denoted there by ^ ) different constants are 
used, but Lemma 15.31 follows from |G08j by a straightforward reduction argument. Besides, 
the definition of Pi^i requires that the permutation a is arbitrary but fixed, instead of being 
a part of the output, as allowed by our Pjxi', however, all the statements made in [G08] 
regarding P^^xi are also valid w.r.t. Pj x j • □ 

Let r be a random variable corresponding to the transcript of S' (observe that its value 
is uniquely determined by the input, as the protocol is deterministic). We will consider the 



^The lower bound proof in [G08] argues that a big combinatorial rectangle cannot be consistent with any 
answer w.r.t. any permutation a, and therefore it makes no difference whether a is fixed "once forever" or 
"per rectangle". 
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mutual information between T and parts of the input. For i G [n], let sf'^ and sf^ be the 

mutual information between T and, respectively, Xi and yi. Let Sjj- =^ s^^^^ + sj^''. Since U'^ 
chooses all Xj-s and y^-s in a mutually independent manner, it holds that 

(y) 

i,je[n] 

Claim 5.4. For some absolute constant a and any G A, it holds thatpij < max | " ^''^ n^^°^ " | • 
Before we prove it, let us see how the claim leads to the desired lower bound. From 
^ , , v-^ 1 v-^ 1 00 log^ n ^ 1 + afc^ log^ n 

nitn)B 2^ ^^'^-n^ — ' 

Pij>l/n3 

/ 1/4 

where = Q (log log n). Therefore, G I -p-^ 



log n y 

Proof of Claim \5m W.l.g., let (1,1) G A and > we want to show that for some 



absolute constant a, it holds that pi^i < " ^^'^'n'^ Let q' be the value defined similarly 

to si^i, but with input distribution conditioned upon [|cell(l, 1)| = 2]. Because the condition 
holds with probability bounded below by a positive constant (by analogy to Observation 13 . 1 p . 
G O (si,i)- Therefore, it will be sufficient to show that pi i G O (^ '^ . 

We will use S' as a protocol for solving Pixi by embedding its instance into coordinate 
(1, 1) of P, and the rest of input will play the role of private randomness. That is, in order to 
solve Pixi with input {x',y'), we will run S' over the pair ((x', ri, .., r„_i)(y', r„, .., r2n-2)) , 
where ri,..,r„_i are independent random subsets of [4n^] of size n, chosen by Alice, and 
r„,..,r.„_2 are similarly chosen by Bob. Note that our embedding requires only private 
randomness and does not cost any communication. 

Let / =^ ^ , and denote by S'^ a private coin protocol that receives I instances of Pj x 
and runs I independent copies of «S" in parallel in a mutually independent manner, one for 
each instance of Pixi embedded into P as described. After that S'l outputs {j,Cj) for a 
random j, such that the j'th copy of emulated S' contains (1, 1, cj) among its answers; if no 
such j exists then S[ returns no answer. The following properties of S'l with respect to I input 
pairs independently chosen according to lAn^^^ are easy to verify: 

• If an answer is returned then Cj is a right answer to the j'th instance of Pixi with 
probability at least 1 — 800e (this follows from (1, 1) G A). 

• The probability that an answer is returned isl — (1— ri^i)'> min 

• The protocol makes at most k iterations. 



• The probability that the transcript of S[ contains more than 2>q'l\J\og n bits of informa- 
tion about the input is at most ^ (this follows from the Chernoff bound and mutual 
independence of the input instances). 
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We view S'l as a protocol for solving the following distributional problem: the input consists 
of I independent instances of Pixi, each chosen according tohln^^\ and to solve the problem 
one should provide a correct answer to any given instance of P^xi- Note that the probability 
that S'l returns an answer is $7 (l/n'^) (as we assume that pi^i > ■^), and therefore we can use 
Lemma [5.2[ The lemma implies that there exists a public coin protocol S" of cost O (klogn) 
that receives / instances of Pixi and returns an answer to one of them with probability at 
least min | j , ^^r- 1 , such that if an answer is returned it is correct with probability at least 
1 - 801e. 

So far we have refrained from using using public randomness in our constructions, in order 
to be able to use Lemma 15.21 (allowing private randomness only) . Now we are going to use 
public randomness in order to construct a protocol S'" for solving a single instance of Pj x J • 

If we apply a uniformly random permutation over [4n^] to any (x, y) from the support of 
we obtain a new pair (x', y'), drawn from lAn^^\ Our S'" will use public randomness 
to choose I uniformly random permutations di, . . . , cr/, and apply them to its input (x, y) to 
obtain / new instances {ai{x),ai{y)) , . . . , {ai{x), ai{y)). Then S'" will feed these / instances 
to S"; if S" outputs (j, Cj) then S'" will return {aj,Cj), otherwise it will refuse to answer. 

Like S" , our S'" returns an answer with probability at least min ||, ^^p^ |, and if an 

answer is returned it is correct with probability at least 1 — 801e. Unlike its predecessor, S'" 
deals with a single input instance of Pixi, and therefore for sufficiently small e Lemma 
guarantees that 

kpi^i ^ Q ( log^ n + k"^ n 



Aq' \ 

which leads to G O {^-^^^^^ , as required. ^ciaim\5^\ 

6 What we haven't done 

• Can shared entanglement be stronger than quantum communication? In fact, it is wide- 
open how to compare any model with entanglement to either Q or , due to the fact 
that we do not know how much entanglement can be needed to solve a communication 
problem of given input length. 

• Is it possible to find a partial functional problem that requires exponentially more 
communication in IZ than in 7^11'*^"*? How about a total function? 

• Is it possible to find a problem that requires exponentially more communication in TZ 
than in Q"? 
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A Appendix 



Lemma 15.21 Let 5i,52 > 0, ki,k2 G N, such that a communication problem P is solvable 
w.r.t. distribution D by a ki-round private coin protocol which produces an answer with 
probability at least 5i, and a produced answer is correct with probability at least 82- Assume 
also that the mutual information between the transcript of the protocol and its inputs is at 
most k2 bits, with probability 1 — o{6i). 

Then P is solvable w.r.t. D by a public coin protocol of communication cost O {ki + k2) 
which produces an answer with probability at least 61 /2 and any produced answer is correct 
with probability at least 62 — (1). 

Proof of Lemma \5.SX Let S be the protocol guaranteed by the lemma requh'ement, assume 
that the input (x, y) is produced according to the distribution D. Let J be a random variable 
representing the amount of mutual information between the transcript of S and the input. 

It is shown in [HJAR07] how to build a public coin protocol S' with the following prop- 
erties: 

• For some absolute constant /?, communication cost of S' is upper-bounded by (3ki + 6 J. 

• S' refuses to answer with probability at most 1/3 (denote this event by Ei). Otherwise 
it produces an answer, distributed according to the same distribution as the answer of 
S for the given input. 

Even if Ei does not occur no answer may be returned, as S is allowed to have positive 
probability to refuse to answer. We will denote this second sort of refusal to answer by E2 
(note that this event is mutually exclusive with £^1). It is clear though that an answer is 
produced (i.e., neither Ei nor E2 occurs) with probability at least and if that happens 
then the answer is correct with probability at least 62- 

We construct a protocol 5", similar to S' but equipped with the following "cost control 
mechanism". If the total number of communicated bits exceeds -|- Qk2 then S" halts 
and refuses to answer. The probability that this mechanism actually stops a single run 
of the protocol is upper-bounded by the probability that J > k2, which is the probability 
that S exposes more than /c2 bits of information about its inputs. The latter is in o{6i) by 
the assumption, and therefore S" returns an answer with probability ^ - o{5i) > ^ (for 
sufficiently long inputs). On the other hand, whenever an answer is returned it is correct 
with probability at least 62 — = 52 — (1), as required. ^Lemma[5^ 
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